Privacy Policy
Last updated: 2 May 2026
This Privacy Policy explains how 02X (Pty) Ltd, trading as GRC Shop ("we", "us", "our"), collects, uses, stores, and protects personal information in line with the Protection of Personal Information Act, 4 of 2013 (POPIA).
1. Who we are
02X (Pty) Ltd · Registration 2025/768856/07 · trading as GRC Shop · Gauteng, South Africa. We are the responsible party for personal information collected through our websites at www.grcshop.co.za and www.02x.co.za and through services we provide.
2. Information we collect
We collect information that you give us directly (when you submit a contact form, request a demo, or subscribe to communications) and information collected automatically (technical data, IP address, device and browser information, pages viewed). Categories typically include: name, email address, phone number, company name, job title, and the contents of messages you send us.
3. Why we process your information (lawful basis)
We process personal information lawfully on one or more of the following bases under POPIA: with your consent; to perform a contract with you; to comply with our legal obligations; to pursue our legitimate interests, balanced against your rights, including responding to enquiries, providing managed compliance services, securing our systems, and improving our offering.
4. How we use your information
We use personal information to respond to enquiries and demo requests; to deliver and administer our compliance services; to send service-related communications; to provide newsletters or insights only where you have opted in; to operate, secure, and improve our website; and to comply with legal and regulatory obligations.
5. Who we share with
We share personal information only where necessary, with: trusted operators that process personal information on our behalf under written agreements (cloud hosting, email and customer relationship platforms, analytics providers); professional advisors (legal, audit) under confidentiality; and authorities where we are legally compelled to do so. We do not sell personal information.
6. Cross-border transfers
Some of our service providers operate outside South Africa. Where personal information is transferred cross-border, we rely on contractual safeguards or jurisdictions with adequate protection, in accordance with section 72 of POPIA.
7. How long we keep information
We retain personal information only for as long as is reasonably required for the purposes for which it was collected, or as required by law. Enquiry data is typically retained for up to 24 months unless you become a customer or unsubscribe.
8. Your rights as a data subject
Subject to POPIA, you have the right to: be notified that we hold your information; access information we hold about you; request correction or deletion of your information; object to processing; withdraw consent where consent was the basis for processing; and lodge a complaint with the Information Regulator.
9. How to exercise your rights
To exercise any of the above rights, contact our Information Officer at compliance@grcshop.co.za. Information Officer: Philip de Witt. We will respond within 30 days.
10. Complaints to the Information Regulator
If you believe your rights under POPIA have been infringed, you may lodge a complaint with the Information Regulator (South Africa): Email POPIAComplaints@inforegulator.org.za · Website www.inforegulator.org.za.
11. Cookies
Our websites use a small number of cookies for essential functionality, analytics, and to remember your cookie-banner preferences. You can manage cookies through your browser settings. See our cookie banner on the site for current options.
12. Security
We implement reasonable technical and organisational safeguards to protect personal information against loss, unauthorised access, alteration, or disclosure, in line with section 19 of POPIA. No method of transmission or storage is perfectly secure, however.
13. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always posted at www.grcshop.co.za/privacy with the date of the most recent update.
14. Contact us
02X (Pty) Ltd t/a GRC Shop
Information Officer: Philip de Witt
Email: compliance@grcshop.co.za
Phone: +27 82 835 4731
Address: Gauteng, South Africa